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We report the full implementation of a quantum cryptography protocol using a stream of single 
photon pulses generated by a stable and efficient source operating at room temperature. The single 
photon pulses are emitted on demand by a single nitrogen-vacancy (NV) color center in a diamond 
nanocrystal. The quantum bit error rate is less that 4.6% and the secure bit rate is 9500 bits/s. 
The overall performances of our system reaches a domain where single photons have a measurable 
advantage over an equivalent system based on attenuated light pulses. 

PACS numbers: 03.67.Dd, 42.50.Dv 



Since its initial proposal in 1984 |L| and first experi- 
mental demonstration in 1992 |^], Quantum Key Distri- 
bution (QKD) has reached maturity through many ex- 
perimental realizations ||, and it is now commercially 
available Q. However, most of the practical realizations 
of QKD rely on weak coherent pulses (WCP) which are 
only approximation of single photon pulses (SPP), that 
would be desirable in principle. The presence of pulses 
containing two photons or more in WCPs is an open door 
to information leakage towards an eavesdropper. In order 
to remain secure, the WCP schemes require to attenuate 
more and more the initial pulse, as the line losses become 
higher and higher, resulting in either a vanishingly low 
transmission rate - or a loss of security |5|, 0]. The use 
of an efficient source of true single photons would there- 
fore considerably improve the performances of existing 
or future QKD schemes, especially as far as high-losses 
schemes such as satellite QKD are considered. 

In this letter we present the first complete realization 
of a quantum cryptographic key distribution based on a 
pulsed source of true single photons. Our very reliable 
source of single photon has been used to send a key over 
a distance of 50 m in free-space at a rate of 9500 secret 
bits per second including error correction and privacy 
amplification. Using the published criteria that warrant 
absolute secrecy of the key against any type of individual 
attacks || g|, we will show that our set-up reaches the 
region where a single photon QKD scheme takes a quan- 
titative advantage over a similar system using WCP. 

Single photon sources have been extensively studied in 
recent years and a great variety of approaches has been 
proposed and implemented Ji], ||, [h], [ll| [l2|, 13 . Our 
single photon source is based on the fluorescence of a 
single Nitrogen- Vacancy (NV) color center |i~4j inside a 
diamond nanocrystal [[15j , |l6| at room temperature. This 
molecular-like system has a lifetime of 23 ns when it is 
contained in a 40 nm nanocrystal Its zero-phonon 
line lies at 637 nm and its room temperature fluorescence 
spectrum ranges from 637 nm to 750 nm |l7|| . This center 
is intrinsically photostable: no photobleaching has been 
observed over a week of continuous saturating irradia- 
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FIG. 1: Experimental set-up 



tion of the same center. The nanocrystals are held by a 
30 nm thick layer of polymer that has been spin coated 
on a dielectric mirror p"5| . The mirror is initially slightly 
fluorescing, but this background light is reduced to a neg- 
ligible value by hours of full power excitation that leads 
to a complete photobleaching of the dielectric coating, 
the NV center being unaffected. 

The experimental set-up is shown in Fig. |lj Alice's 
station consists in a pulsed single photon source, a pho- 
ton correlation detection to control the quality of the 
SPP, and a 4-state polarization encoding scheme. The 
single photon source is pumped by a home built pulsed 
laser at a wavelength of 532 nm that delivers 800 ps 
long pulses of energy 50 pJ with a repetition rate of 5.3 
MHz, synchronized on a stable external clock Jig . The 
green excitation light is focused by a metallographic ob- 
jective of high numerical aperture (NA — 0.95) onto the 
nanocrystals. The partially polarized fluorescence light 
(polarization rate of 46%) is collected by the same objec- 
tive. It is then polarized horizontally by passing through 
a polymer achromatic half-wave plate and a polarizing 
cube, spectrally filtered by a long-pass filter that elim- 
inates the reflected laser light, and spatially filtered by 
a confocal set-up. In order to control the quality of the 
SPP, the light can be sent via a movable mirror onto 
a photon correlation detection scheme consisting of two 
avalanche photodiodes (APD) in a Hanbury-Brown and 
Twiss set-up. 
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FIG. 2: Autocorrelation function of a single NV center on 
Alice's side. The raw coincidences are given as a function 
of the delay between the arrival times of the photons at Al- 
ice's correlation detection set-up. The exciting laser has a 
repetition period of 187.5 ns, a pulse width of 0.8 ns and an 
average power of 0.2 mW. The count rates are about 3.5 x 10 4 
s _1 on each avalanche photodiode, and the integration time 
is 166s. The coincidences between peaks do not go down to 
zero because of the overlapping of adjacent peaks. The num- 
ber above each peak represents its normalized area. The dots 
are experimental data. The line is an exponential fit for each 
peak and takes into account the background light. 



The total number of polarized photons detected by the 
two APDs altogether is A^ o) = 7 x 10 4 s" 1 for an exci- 
tation repetition rate of 5.3 MHz. This gives an overall 
efficiency of 1.3%. The autocorrelation function of the 
emitted light at saturation, displayed on Fig. ||, shows 
that the number of photon pairs within a pulse is strongly 
reduced with respect to Poisson statistics. The normal- 
ized area of the central peak is C(0) = 0.07, where this 
area would be unity for WCPs [[l6) . This means that the 
number of two-photon pulses of our source is reduced by 
a factor of 1/C(0) = 14 compared to a WCP. 

The Bennett Brassard protocol [l]] (BB84) is imple- 
mented by using the Horizontal- Vertical (H-V) and Cir- 
cular Left-Circular Right (L-R) basis. These four po- 
larization states are obtained by applying four levels of 
high voltage on an electro-optical modulator (EOM). 
The EOM is driven by a home made module, that can 
switch 500 V in 30 ns to ensure the 5.3 MHz repeti- 
tion rate of single photon source. The driving module 
is fed by sequences of pseudo-random numbers, that are 
produced using a linear feedback shift register in the Fi- 
bonacci configuration. In order to minimize polarization 
errors due to the broad bandwidth of the emitted pho- 
tons, the EOM is operating very close to exact zero-path 
difference (white light fringe). This is obtained by in- 
serting a suitable birefringent plate to compensate for 
the residual birefringence of the EOM. Given the mea- 
sured transmission of the EOM of Teom = 0.65, and 
the quantum efficiency of the control APDs of r\ = 0.6, 
the rate of single photons emitted by Alice station is 
N (a) = n^Teom/v = 7.58 x 10 4 s" 1 . The average 
photon number per pulse is thus fi = 0.014. 



The detection at Bob's site lies 50 m away from Al- 
ice down a corridor. The single photons are sent via a 
2 cm diameter beam so that diffraction effects are neg- 
ligible. The H-V or L-R basis are passively selected by 
a near 0° incidence 50/50 beam splitter that is polar- 
ization insensitive. A polymer achromatic quarter-wave 
plate is inserted in the L-R basis arm. In each basis a 
polarizing beam splitter sends the two polarizations on 
two APDs. The time arrival of the photons is acquired 
by a four channel digital oscilloscope on a memory depth 
of 1 million points per channel and a time resolution of 
10 ns. The acquired sequence is hence 10 ms long and it 
can be repeated at will after the memory of the oscillo- 
scope has been emptied. For the sake of simplicity, the 
synchronization signal is send to the oscilloscope using a 
coaxial cable, but it would be straightforward to use the 
IR or green laser pulses for the same purpose. 

The total number of photons detected by Bob is 
= 3.93 x 10 4 s -1 . The dark counts on Bob's 
APDs with no signal at the input are (ciy, dy, g?l, da) = 
(150, 180, 380, 160) s" 1 . This includes APD's dark counts 
and background noise due to ambient light, that is care- 
fully shielded using dark screens and pinholes. Consid- 
ering the 23 ns lifetime of the NV center, a post selec- 
tion of pulses within a 50 ns gate selects approximatively 
■q g = 90% of all single photons, and keeps only [3 g = 27% 
of the background counts. After basis reconciliation, the 
raw bit rate is then N r = r) g N^ /2 = 1.77 x 10 4 s" 1 . 
Taking into account the detection gate, the fraction of 
dark counts versus useful photons during a detection gate 

is therefore p da rk = 0gY,i=H,V,L,R d i/{ r }g N D) = °- 7 %- 
The static polarization error rates are measured while 
Alice codes each one of the four polarizations, and they 
are = 1.2% in the H-V basis and = 3.2% in 
the L-R basis, owing to the slight imperfection brought 
by the achromatic wave plate (dark counts have been 
substracted in these values). One can thus estimate the 
quantum bit error rate (QBER) to be e = (pdark +Ppo\ + 
Ppoi)/2 = 2.6%. By comparing the full key that Bob re- 
ceived to the one that Alice sent, the measured QBER 
is found to be e = 4.6% ± 1%. The difference with the 
previous value is attributed to the fact that static po- 
larization errors underestimate the real dynamic errors, 
owing to the non ideal shape of the electric pulses driv- 
ing the EOM. The complete secret key transmission was 
achieved by carrying out error correction and privacy am- 
plification using the public domain sofware "QUCRYPT" 
designed by Louis Salvail fl8| . This leads to an average 
of 100 secret bits shared by Alice and Bob in a 10 ms 
sequence. 

We now compare the performance of our single pho- 
ton BB84 set-up with QKD schemes using WCPs @, [l9). 
The comparison is carried out by taking the detection ef- 
ficiency and the dark counts of Bob in the present set-up. 
For WCP we assume a detectiongate of 2 ns that is typ- 
ical for recent experiments [Q fL9[ , The quantities that 
are compared are the maximum allowed on-line losses 
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and the secret bit rate. Since QKD is supposed to of- 
fer unconditional security, it is assumed that a potentiel 
eavesdropper (Eve) has an unlimited technological power 
to carry out individual attacks within the rules of quan- 
tum mechanics. Eve can then access all the information 
leakage caused by the quantum bit error rate e and by 
the multiphoton pulses || . In the case of WCP with an 
average number (i of photons per pulse at Alice's station 
(/i <C 1), the probability of a multiphoton pulse is given 
by S^ CP = ^ 2 /2- The only way to reduce the fraction 
of multiphoton pulses in WCP is therefore to reduce the 
bit rate by working with smaller /i. To the contrary, 
SPP offers the possibility of achieving a vanishing ratio 
of multiphoton pulses without any trade-off on the filling 
of the pulses. In the present experiment the probability 
of a multiphoton pulse is reduced to Sf r f F — C(0)/i 2 /2 
with C(0) = 0.07. 

The important figure to be evaluated is the number 
of secure bits per pulse (G) after error correction and 
privacy amplification. This quantity is given by Q 
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The quantity p cxp is the probability that Bob has a click 
on his detectors (including possible dark counts) during 
a detection gate, and S m is the probability of a mul- 
tiphoton photon pulse just at the output of Alices sta- 
tion. The function f[e] depends on the algorithm that 
is used for the error correction. The Shannon limit 
gives /[e] = 1 for any e, which is the value taken in 
Fig. pi. For the best known algorithm, /[e] = 1.16 for 
e < 5%. In our set-up, the parameters are (p e xp 5 S m , e) = 
(7.4 x 10~ 3 , 1.9 x 10~ 6 , 4.6 x 10~ 2 ) so that G = 1.8 x 10~ 3 . 
The number of secure bits per second is given by eq (Q) 
is thus Aqkd = 0.95 x 10 4 s _1 which is compatible with 
our experimental value of 10 4 s . 

As can be seen in Fig. ||, our SPP quantum cryp- 
tographic system has a quantitative advantage over the 
best existing WCP systems. When any type of individual 
attacks, without any technological limitations, are taken 
into account, our SPP system can deliver absolutely se- 
cure secret key at higher bit rate and offers the possibility 
of transmitting this key over longer distances. Our quan- 
tum cryptographic set-up compares also favorably with 
QKD experiments using pairs of entangled photons p0[ , 
with a significantly higher secure bit rate in our case. 
Moreover, several relatively simple improvements could 
give SPP-QKD protocols an even greater advantage. In 
particular, inserting the emitter in a microcavity pl[ is 
within experimental reach, and may be helpful to increase 
the collection efficiency, and therefore the secret bit rate, 
and also to narrow the emission spectrum, and thus to 
reduce polarisation errors. 
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FIG. 3: These plots give theoretical evaluations obtained by 
using Eq. (|l|) , together with the experimental parameters for 
our single-photon source, (a) Calculated number of secure bit 
per time detection time gate G as a function of the on-line 
losses for SPPs and WCPs, for different average photon num- 
ber per pulse [i. The SPP traces correspond to our value of the 
zero time autocorrelation of C = 0.07. (b) The maximum al- 
lowed on-line losses for secure communication is deduced from 
(a) and corresponds to the attenuation for which G — 10 -6 . 
This value is plotted as a function of the mean photon number 
per pulse fi, for a WCP system, for a SPP system with our 
value of the zero time autocorrelation (C = 0.07), and for an 
ideal SPP system with C = 0. The vertical line corresponds 
to our source, ie (X = 0.014. (c) Number of secure bit per 
detection time gate G as a function of the mean photon num- 
ber per pulse \i for on-line losses of 12.5 dB. The SPP trace 
assumes that G = 0.07, and the vertical line corresponds to 
fi = 0.014. 
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As a conclusion, we have demonstrated the first com- 
plete single photon quantum key distribution set-up by 
using a very reliable room temperature single photon 
source. Despite the fairly broad spectrum of the single 
photons, a 4-states polarization encoding and decoding 
was implemented with low error rate (4.6%), and trans- 
mission over 50 m in air was successfully achieved with 
a secure bit rate of Yqkd = 9500 s _1 . These results 
show that single photon QKD is a realistic candidate for 
long distance quantum cryptography, such as surface-to- 
satellite QKD. 
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